CVE-2026-3684 is a vulnerability in IBM Cloud Pak for Data System versions 11.3.1.2 Interim Fix 001 through 11.3.1.2 Interim Fix 002. It allows users with administrative privileges to read and write arbitrary files on the system due to incorrect permission assignments. The flaw impacts confidentiality and integrity but does not affect availability.